Encryption

Can you tell me what type of encryption we use for the collection of payments? Are we able to obtain outside (3rd party secure verification status such as e-verify, etc.)?

What gateway are you using, Will? PayPal Standard and Express Checkout, ClickBank, Google Checkout, they take the user to their site and you don’t need to deal with encryption, since you’re not handling the payment information.

You’ll need SSL if you using the pro-forms with PayPal Pro or Authorize.Net, though, ’cause you’ll be getting paid on your site.

Thanks Cristian. We are using authorize.net, and I have the SSL in progress now. Thank you for your help!!

You’re welcome!

This article will help: Pre Sale FAQs » Do I need an SSL certificate to use PayPal® Pro or Authorize.Net®?

Perhaps you can help with another topic if that’s OK. Our client also wants to set up EOT notifications at 30 and 15 days prior to expiration. I’ve read on your site where that is in the works for the new release. Any news about that release I could pass along? I’ve also read about the hooks. I’ve passed this info on to my developer, but they said that this may create security risks. What are your thoughts?

No, we don’t have a date for the new major release. Smaller releases of the current s2Member will come soon and frequent, but the major one is still a little bit off.

Security risks from using hooks for the notifications? I’m not sure I understand.

Most users don’t have an EOT time set when they have a subscription, because the time won’t be set until the subscription ends and the gateway notifies s2Member.

For the reminders customization you’ll have to know until when the subscription was paid and store somewhere when the notification should be sent. Then have a cron job that will check these times and email when necessary.

A simple way of doing it for now, although not super precise, is to add them to a list in a service like MailChimp so the email sequence will send them reminders a few days before each time they’d be billed. Video » s2Member (API List Servers)

I hope that helps.